CVE-2021-33044
Dahua IP Camera Authentication Bypass Vulnerability
CVSS
—
Sin CVSS
EPSS
100.0%
p100
KEV
SÍ
21 ago 2024
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Producto
Dahua / IP Camera Firmware
Vulnerabilidad
Dahua IP Camera Authentication Bypass Vulnerability
Añadido a KEV
21 ago 2024
Remediar antes de
11 sept 2024
Uso conocido en ransomware
No
Descripción resumida
Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication.
Acción requerida
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://www.dahuasecurity.com/aboutUs/trustedCenter/details/582; https://nvd.nist.gov/vuln/detail/CVE-2021-33044